Skip to content

Zillow API Key

Service Name: Zillow

Service Description: Zillow is a real estate marketplace that provides information on homes, real estate listings, mortgages, and home improvement. Their API allows developers to access property data, valuations, and real estate information.

Service Address: https://www.zillow.com/howto/api/APIOverview.htm

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Zillow's property data, home valuations (Zestimates), property details, and real estate information through their API endpoints.

Secret Revokement URL: https://www.zillow.com/user/account/

Secret Example: X1-ZWz1h1d3abcdef_1a2b3

Suspicious Activity Investigation Instructions:

  • Review API usage logs for unusual request patterns or excessive calls
  • Check for unauthorized access from unexpected IP addresses
  • Monitor for data scraping patterns that violate Zillow's terms of service
  • Verify if the API key is being used in unauthorized applications
  • Check for unusual geographic patterns in property data requests

Mitigation Instructions:

  • Log in to your Zillow developer account
  • Navigate to the API management section

  • Revoke the compromised API key

  • Generate a new API key with appropriate permissions

  • Update your applications with the new API key
  • Implement rate limiting in your application to prevent abuse
  • Consider implementing IP restrictions at the application level
  • Review and update your application's security practices to prevent future key

exposure